buildroot/package/audiofile/0006-Actually-fail-when-error-occurs-in-parseFormat.patch, branch 2018.02OpenPOWER buildroot sourceshttps://git.raptorcs.com/git/buildroot/atom?h=2018.022017-03-31T11:36:26+00:00audiofile: add security patch for CVE-2017-68312017-03-31T11:36:26+00:00Peter Korsgaardpeter@korsgaard.com2017-03-30T21:03:34+00:00urn:sha1:bd5f84d301c4e74ca200a9336eca88468ec0e1f3
Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in
Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a
denial of service (crash) via a crafted file.
https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-imadecodeblockwave-ima-cpp
https://github.com/mpruett/audiofile/issues/35
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>